Information System Security Officer

$68,400 - $143,700/Yr

CACI International - Remote, OR

Full-time - Senior

Remote - Remote, OR

Professional, Scientific, and Technical Services

About the position

CACI is seeking a Senior level Information System Security Officer to support our Army customer at Aberdeen Proving Ground (APG), MD. This role is primarily remote, with occasional on-site requirements for accessing classified materials and attending meetings. The officer will serve as a subject matter expert on Risk Management Framework (RMF) and Continuous Risk Monitoring, ensuring the security posture of customer systems and providing technical security recommendations.

Responsibilities

• Serve as the subject matter expert on Risk Management Framework (RMF) and Continuous Risk Monitoring of the customer systems.
• Establish and maintain the required network security posture through Risk Mitigation and Risk Management in coordination with the ISSM.
• Provide analytical and technical security recommendations to other IT section members.
• Identify and define security requirements based upon need or as the result of a security issue that puts systems at risk.
• Assist in the development of technical solutions and new security tools to help mitigate security vulnerabilities and automate repeatable tasks.
• Create, maintain, and document security baselines.

Requirements

• An active DoD Secret clearance.
• Provide full spectrum Risk Management Framework (RMF) support for IT and Operational Technology.
• Work with technical teams to mitigate security control deficiencies and scan vulnerabilities for assigned cloud-based software and wearables.
• Support systems owners to develop, update and maintain the System Security Plan (SSP) for assigned systems.
• Manage the POA&M process for designated IT systems to provide timely detection, identification, and alerting of non-compliance issues.
• Advise system owners on all matters, technical and otherwise, involving the security of assigned IT systems.
• Independently review security artifacts provided by program offices and other organizations and assess both the technical and functional adequacy of the cybersecurity/information assurance controls.
• Perform compliance scans and implement DISA Security Template Implementation Guide (STIG) based controls on various programs.
• Perform vulnerability scans using Assured Compliance Assessment Solution (ACAS) and/or review Nessus results.
• Familiar with Enterprise Mission Assurance Support Service (eMASS).
• Must be familiar with NIST Special Publications, DoD policy, and Army regulations relating to RMF.
• Able to complete Weekly Activity Reports (WAR's) and Monthly Status Reports (MSR's).
• Must be able to complete a Privacy Impact Assessment (PIA) and complete test results for the privacy overlay.

Nice-to-haves

• Lead implementation of the RMF security standards on complex information systems.
• Ability to work in a team focused, dynamic environment.
• Must be flexible, independent, and self-motivated.
• Familiar with PII/PHI/HIPAA.
• Prior experience supporting DoD is preferred.
• Foundational level cloud certification.
• CompTIA A+/Sec+ preferred.

Benefits

• Healthcare benefits
• Wellness programs
• Financial benefits
• Retirement plans
• Family support programs
• Continuing education opportunities
• Flexible time off benefits